Subprocessors may change as the service evolves. Material changes should be reflected here and in the Privacy Policy.
GDPR subprocessors
These third-party providers may process personal data where necessary to provide Gilu AI.
Germany / EU
Application hosting and infrastructure
DPA in place; EU processing
USA / international
Routing prompts to included AI model providers (currently OpenAI, Anthropic, Google, Meta, and Perplexity) and returning model output. OpenRouter is not used by us as storage for customer prompts.
OpenRouter DPA/SCCs and provider terms where applicable
Netherlands / EU
Transactional email delivery, such as verification and password reset emails
EU-based provider; DPA where applicable
Estonia / EU
Checkout, subscription management, invoices, and billing portal
EU-based provider; payment-related controller obligations may apply
EU / USA
Optional Google OAuth sign-in
Google data processing terms and SCCs where applicable
Im Rahmen der Bereitstellung unserer SaaS-Dienste setzen wir die oben genannten Unterauftragnehmer ein. Die Zwecke, Standorte und Schutzmaßnahmen gelten entsprechend auch für die deutsche Fassung. Bei wesentlichen Änderungen wird diese Übersicht aktualisiert.